open-agents-ai 0.103.43 → 0.103.45

package/dist/index.js

@@ -12601,6 +12601,18 @@ async function handleCmd(cmd) {
 
       // \u2500\u2500 Metered Inference Exposure \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
       case 'expose': {
+        // Clear old inference capabilities before registering new ones
+        // (prevents stale local Ollama models when switching to passthrough, or vice versa)
+        if (typeof nexus.getRegisteredCapabilities === 'function' && typeof nexus.unregisterCapability === 'function') {
+          var oldCaps = nexus.getRegisteredCapabilities();
+          for (var oci = 0; oci < oldCaps.length; oci++) {
+            if (oldCaps[oci].startsWith('inference:') || oldCaps[oci] === 'system_metrics' || oldCaps[oci] === '__list_capabilities') {
+              try { nexus.unregisterCapability(oldCaps[oci]); } catch {}
+            }
+          }
+          dlog('expose: cleared ' + oldCaps.length + ' old capabilities');
+        }
+
         // Auth key for gating inference access (passed from ExposeP2PGateway)
         var exposeAuthKey = args.auth_key || '';
         if (exposeAuthKey) {
@@ -12754,6 +12766,16 @@ async function handleCmd(cmd) {
               const logFile = join(invocationsDir, Date.now() + '-' + capName + '.json');
               try { writeFileSync(logFile, JSON.stringify(logEntry, null, 2)); } catch {}
 
+              // Safe stream write \u2014 consumer may have timed out and closed the stream
+              var streamClosed = false;
+              async function swrite(msg) {
+                if (streamClosed) return;
+                try { await stream.write(msg); } catch (swErr) {
+                  dlog('stream.write failed (consumer likely timed out): ' + (swErr.message || swErr));
+                  streamClosed = true;
+                }
+              }
+
               // Collect input via stream data events
               // NOTE: auth_key arrives in invoke.chunk data, NOT in invoke.open (request).
               // We must accept + read data FIRST, then validate auth.
@@ -12771,7 +12793,7 @@ async function handleCmd(cmd) {
               });
 
               // Accept the invocation so the consumer sends data
-              await stream.write({
+              await swrite({
                 type: 'invoke.accept', version: 1,
                 requestId: request.requestId, accepted: true,
               });
@@ -12802,9 +12824,9 @@ async function handleCmd(cmd) {
                 }
                 if (reqAuthKey !== exposeAuthKey) {
                   dlog('expose: auth REJECTED for ' + capName + ' from ' + (request.from || 'unknown'));
-                  await stream.write({ type: 'invoke.event', version: 1, requestId: request.requestId, seq: 0, event: 'error', data: 'Unauthorized \u2014 invalid or missing auth key' });
-                  await stream.write({ type: 'invoke.done', version: 1, requestId: request.requestId, usage: { inputBytes: 0, outputBytes: 0 } });
-                  stream.close();
+                  await swrite({ type: 'invoke.event', version: 1, requestId: request.requestId, seq: 0, event: 'error', data: 'Unauthorized \u2014 invalid or missing auth key' });
+                  await swrite({ type: 'invoke.done', version: 1, requestId: request.requestId, usage: { inputBytes: 0, outputBytes: 0 } });
+                  try { stream.close(); } catch {}
                   return;
                 }
                 dlog('expose: auth OK for ' + capName);
@@ -12923,14 +12945,14 @@ async function handleCmd(cmd) {
                 }
 
                 // Stream result back
-                await stream.write({
+                await swrite({
                   type: 'invoke.event', version: 1,
                   requestId: request.requestId, seq: 0,
                   event: 'result',
                   data: JSON.stringify(responsePayload),
                 });
 
-                await stream.write({
+                await swrite({
                   type: 'invoke.done', version: 1,
                   requestId: request.requestId,
                   usage: {
@@ -12940,18 +12962,19 @@ async function handleCmd(cmd) {
                   },
                 });
               } catch (e) {
-                await stream.write({
+                dlog('expose: inference error: ' + (e.message || e));
+                await swrite({
                   type: 'invoke.event', version: 1,
                   requestId: request.requestId, seq: 0,
                   event: 'error', data: 'Inference failed: ' + e.message,
                 });
-                await stream.write({
+                await swrite({
                   type: 'invoke.done', version: 1,
                   requestId: request.requestId,
                   usage: { inputBytes: 0, outputBytes: 0 },
                 });
               }
-              stream.close();
+              try { stream.close(); } catch {}
             }, capOpts);
           }
         }
@@ -13350,7 +13373,7 @@ process.on('SIGINT', () => process.emit('SIGTERM'));
           },
           margin: {
             type: "string",
-            description: "Price margin multiplier for expose (0.5 = 50% of market rate, 0 = free). Default: 0.5"
+            description: "Price margin multiplier for expose (0.5 = 50% of market rate, 0 = free). Default: 0 (free)"
           },
           daily_limit: {
             type: "string",
@@ -13618,23 +13641,57 @@ process.on('SIGINT', () => process.emit('SIGTERM'));
       // =========================================================================
       async doConnect(args) {
         await this.ensureDir();
+        const currentScriptHash = createHash("sha256").update(DAEMON_SCRIPT).digest("hex").slice(0, 16);
         const existingPid = this.getDaemonPid();
         if (existingPid) {
-          const statusFile2 = join30(this.nexusDir, "status.json");
-          if (existsSync23(statusFile2)) {
+          const daemonPath2 = join30(this.nexusDir, "nexus-daemon.mjs");
+          let needsRestart = false;
+          if (existsSync23(daemonPath2)) {
             try {
-              const status = JSON.parse(await readFile13(statusFile2, "utf8"));
-              if (status.connected && status.peerId) {
-                return `Already connected (pid: ${existingPid}, peerId: ${status.peerId})`;
+              const onDisk = readFileSync16(daemonPath2, "utf8");
+              const diskHash = createHash("sha256").update(onDisk).digest("hex").slice(0, 16);
+              if (diskHash !== currentScriptHash) {
+                needsRestart = true;
               }
             } catch {
+              needsRestart = true;
             }
           }
-          try {
-            process.kill(existingPid, "SIGTERM");
-          } catch {
+          if (needsRestart) {
+            try {
+              process.kill(existingPid, "SIGTERM");
+            } catch {
+            }
+            await new Promise((r) => setTimeout(r, 1e3));
+            try {
+              process.kill(existingPid, 0);
+              process.kill(existingPid, "SIGKILL");
+            } catch {
+            }
+            for (const f of ["daemon.pid", "status.json", "cmd.json", "resp.json"]) {
+              const p = join30(this.nexusDir, f);
+              if (existsSync23(p))
+                await unlink(p).catch(() => {
+                });
+            }
+          } else {
+            const statusFile2 = join30(this.nexusDir, "status.json");
+            if (existsSync23(statusFile2)) {
+              try {
+                const status = JSON.parse(await readFile13(statusFile2, "utf8"));
+                if (status.connected && status.peerId) {
+                  await this.ensureWallet();
+                  return `Already connected (pid: ${existingPid}, peerId: ${status.peerId})`;
+                }
+              } catch {
+              }
+            }
+            try {
+              process.kill(existingPid, "SIGTERM");
+            } catch {
+            }
+            await new Promise((r) => setTimeout(r, 500));
           }
-          await new Promise((r) => setTimeout(r, 500));
         }
         for (const f of ["daemon.pid", "status.json", "cmd.json", "resp.json"]) {
           const p = join30(this.nexusDir, f);
@@ -13703,6 +13760,7 @@ process.on('SIGINT', () => process.emit('SIGTERM'));
             }
           }
         }
+        await this.ensureWallet();
         const daemonPath = join30(this.nexusDir, "nexus-daemon.mjs");
         await writeFile12(daemonPath, DAEMON_SCRIPT);
         const agentName = args.agent_name || "open-agents-node";
@@ -14019,6 +14077,57 @@ process.on('SIGINT', () => process.emit('SIGTERM'));
           `Free inference (margin=0) works without funding.`
         ].join("\n");
       }
+      /**
+       * Auto-create wallet + x402-wallet.key if none exists.
+       * Called from doConnect() before daemon spawn so the daemon starts x402-ready.
+       * Silent — no user output, just ensures the files exist.
+       */
+      async ensureWallet() {
+        const walletPath = join30(this.nexusDir, "wallet.enc");
+        if (existsSync23(walletPath))
+          return;
+        let address;
+        let privKeyHex;
+        try {
+          const { privateKeyToAccount } = await import("viem/accounts");
+          const privKey = randomBytes6(32);
+          privKeyHex = privKey.toString("hex");
+          const account = privateKeyToAccount(`0x${privKeyHex}`);
+          address = account.address;
+          privKey.fill(0);
+        } catch {
+          const privKey = randomBytes6(32);
+          privKeyHex = privKey.toString("hex");
+          address = "0x" + createHash("sha256").update(privKey).digest("hex").slice(0, 40);
+          privKey.fill(0);
+        }
+        const salt = randomBytes6(32);
+        const key = scryptSync(`${hostname()}:${userInfo().username}:nexus-wallet`, salt, 32, { N: 16384, r: 8, p: 1 });
+        const iv = randomBytes6(16);
+        const cipher = createCipheriv("aes-256-gcm", key, iv);
+        let enc = cipher.update(privKeyHex, "utf8", "hex");
+        enc += cipher.final("hex");
+        const x402KeyPath = join30(this.nexusDir, "x402-wallet.key");
+        const x402Fh = await fsOpen(x402KeyPath, "w", 384);
+        await x402Fh.writeFile("0x" + privKeyHex);
+        await x402Fh.close();
+        privKeyHex = "0".repeat(64);
+        const w = {
+          version: 2,
+          address,
+          encryptedKey: enc,
+          iv: iv.toString("hex"),
+          authTag: cipher.getAuthTag().toString("hex"),
+          salt: salt.toString("hex"),
+          createdAt: (/* @__PURE__ */ new Date()).toISOString(),
+          network: "base",
+          chainId: 8453
+        };
+        const walletFh = await fsOpen(walletPath, "w", 384);
+        await walletFh.writeFile(JSON.stringify(w, null, 2));
+        await walletFh.close();
+        await this.ensureDefaultBudget();
+      }
       // ---------------------------------------------------------------------------
       // Step 2: USDC Balance Query via Base RPC
       // ---------------------------------------------------------------------------

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "open-agents-ai",
-  "version": "0.103.43",
+  "version": "0.103.45",
   "description": "AI coding agent powered by open-source models (Ollama/vLLM) — interactive TUI with agentic tool-calling loop",
   "type": "module",
   "main": "./dist/index.js",